Security and Endpoint Administration in Kontainers

Overview

Applications that are deployed with Engine Yard Kontainers receive a default URL within EYK's domain. You can use this default URL or assign your own registered domain name as the URL for your application in the EYK Web Console. In addition, you can apply your SSL certificate to your application for increased security.


Solution

Check the URL of Your Application

By default, applications are deployed to the EYK domain using the following pattern:
https://eyk.<cluster_name>.<account_name>.ey.io

  1. Login to the EYK Web Console
  2. You will arrive on the Applications page, where you can find the URL of your application on your application's card, under 'Domain'
    check-2-1.png

  3. To see your application, click on the application's card to open the application's Dashboard page, which includes a Visit button that will open your application's default home page
    check-3-1.png

Add an SSL Certificate

To protect visitors to your application, it is advised to generate and assign an SSL certificate as a best practice. Follow these steps to generate an SSL certificate for your application.

  1. Login to the EYK Web Console
  2. You will arrive on the Applications page by default. At the top of the page, click the Resources drop-down and select SSL Certificate to open the SSL Certificates page
    image_ssl_2_1.png

  3. The SSL Certificates page lists any SSL Certificates that you have loaded. To add a new Certificate, click the + Add SSL Certificate button at the top to open the Add SSL Certificate page
    image_ssl_3_1.png

  4. In the Add SSL Certificate page:
    1. Cluster Name: Select the Cluster(s) where your application is deployed
    2. SSL Certificate Name: Enter the name as registered with your Certificate Authority (CA)
    3. Certificate: Copy and paste your plain text SSL certificate starting with
      ----- BEGIN CERTIFICATE-----
      and ending with
      -----END CERTIFICATE-----
    4. Key: Copy and paste your plain text certificate key starting with
      ----- BEGIN RSA PRIVATE KEY-----
      and ending with
      -----END RSA PRIVATE KEY-----
    5. Click the Create SSL Certificate button to add the SSL certificate to your SSL Certificate page
      image_ssl_4_5.png
  • Add a New SSL Certificate:

Back to top

You will be returned to the SSL Certificates page where your certificate will appear in the list.

Use a Custom Domain and/or Add SSL for Your Application

By default, your application will be deployed in the EYK domain using your application and cluster name as: https://eyk.<cluster_name>.<account_name>.ey.io To use your own Domain, simply delete the default domain name, add your Domain Name, and update your DNS records. To add an SSL Certificate, select an SSL Certificate that you added by following the Add an SSL Certificate steps above.

  1. Login to the EYK Web Console
  2. You will arrive on the Applications page. Click on the application name that you want to modify Scaling for from your list of applications to open the Application's Dashboard
    IMAGE_CUSTOM_2_1.png

  3. On the Application Dashboard, click on the Config tab
  4. Scroll to the Domains card
    1. Delete the existing Domain: Click the delete icon next to the Domain Name you want to replace
    2. New Domain: Enter your domain name
    3. SSL Certificate: Select an SSL Certificate from the drop-down that you added to your SSL Certificate list
    4. Click the Add Domain button: This will modify the Domain settings for your application.
    5. Load Balancer URL: In order for the changes to take effect, you will need to update the CNAME of your DNS record to point to the EYK load balancer shown in your Domains card
      IMAGE_CUSTOM_9_1.png
  • Use your custom Domain:  

After the Domain and/or SSL Certificate are updated, your application will be redeployed in a rolling fashion that will not result in downtime for your users and you will be returned to your application's Config tab. 

Back to top


Testing

  1. After your application has finished deploying with the new Domain and/or SSL settings, verify by clicking the Visit button next to your application's Name at the top of the page
    check-3-1.png

  2. Your application's Domain and/or SSL settings match your configured settings

Back to top


Related Articles

Back to top

Comments

Article is closed for comments.